[clamav-users] How do you add specific files to white list ?

[Noel Jones]

On 8/20/2019 11:51 AM, Asok Kumar via clamav-users wrote:
> i am using ClamAV version 0.101.3 and using the parameters below and 
> Heuristics.Limits.Exceeded FOUND because i have enabled it in 
> scanning. how do i add specific files to the whitelist ?

This should probably be documented better on the website.

To whitelist a specific file, add its SHA1 fingerprint to local.sfp 
in the clam database directory (any file that ends with .sfp will work)

To get the fingerprint, use the "sigtool" program included with clam.

sigtool --sha1 filename

this will return a string containing
SHA1:FileSize:filename

paste the whole string into local.sfp.  You'll probably need to 
create the local.sfp file the first time you do this as it's not 
present by default.

clamscan will pick up the change immediately.  If you use clamdscan, 
you'll need to reload clamd.






   -- Noel Jones